$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json) Hash identifier: 1LzuQsMIlsn8w+1oJ0jAAUzywPFvJ1jO4jnzj8pDE2s= Subject key identifier: 8A:FB:8A:24:DF:AC:85:D8:32:F7:D0:78:ED:B8:61:77:F5:C4:72:D4 Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 050B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft Manifest number: 04E8 Signing time: Tue 01 Jul 2025 00:19:07 +0000 Manifest this update: Tue 01 Jul 2025 00:19:07 +0000 Manifest next update: Tue 08 Jul 2025 00:19:07 +0000 Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: Zn6vxKonzHveErGZ6B1UJGPCyA5u1atlix6jNtg95no=) 2: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: lIJvzLYrLtuFIE0gyMhPk2/yxHi1SCB/LUlp5AIoj+E=) 3: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: wlCYlDts3RjNxBy/eT/e5B1Vtzz4yVgtwvYVdQThmhs=) 4: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: /gYeqqbk6WlA+N6Yv/cuDVmH4COmNboDX4ybOjU2VTk=) 5: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: u0zCnyDN76eHB+CmzgwmvJ+3FVkHG07LYemqATFaMtk=) 6: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: DkBXKwosqunys840APEr3udcdpKlpKYanK0TdpOCbNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: Jul 1 00:19:07 2025 GMT Not After : Jul 8 00:19:07 2025 GMT Subject: CN=6863297b-b4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dc:8c:b3:c3:6e:ed:a9:04:f5:00:61:7f:30: 0f:b6:07:66:e1:ae:4a:a8:69:34:41:96:c3:89:10: 76:93:e4:53:18:96:3f:49:a2:01:95:69:ad:0d:e5: 92:27:3b:e6:70:7a:f0:00:03:49:07:dc:55:7d:c1: 16:80:41:bc:3e:9f:60:3f:e5:06:2c:a8:a5:72:b4: d2:da:58:e9:95:12:b8:82:d7:bc:e5:ae:39:36:cb: 1d:45:0b:5c:07:f7:c4:6c:84:8b:da:4a:bb:90:49: fd:70:d2:c7:bd:88:df:70:54:c8:0d:21:1c:69:e5: 4d:33:b9:c2:ba:98:6f:e0:84:fe:97:ab:f6:f8:48: d4:aa:69:a0:8b:ec:2a:d4:a2:da:43:d2:cc:57:d7: e5:46:fa:c8:c2:01:94:22:e9:7b:d0:37:f7:78:7b: 8f:2e:e0:28:d8:d2:9e:42:37:64:05:86:88:0c:39: 35:46:1f:5f:64:44:80:0d:82:e3:2b:d9:80:37:21: e0:27:05:e4:d8:a4:15:73:43:3a:5f:99:18:24:c2: 46:d4:2f:e8:8a:90:f8:6f:de:f6:ee:41:86:f2:4b: e3:91:b3:f6:96:9b:be:6a:a3:84:fd:ff:4c:c2:a6: 0f:c4:47:62:53:0c:4e:fb:25:54:ba:25:86:33:62: 91:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FB:8A:24:DF:AC:85:D8:32:F7:D0:78:ED:B8:61:77:F5:C4:72:D4 X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e3:07:16:76:1c:17:b1:8b:e6:7c:ff:9e:6e:e5:28:de:37: 27:82:f8:d1:e0:16:0e:6f:1a:7d:78:e6:93:93:32:ba:19:99: 71:27:f7:3a:07:fc:d6:00:fd:86:06:95:c3:fa:ed:53:93:5a: f9:f0:54:73:ac:2d:ad:bd:55:7f:c1:2e:03:44:d5:28:ca:4e: 6c:9f:a1:74:b7:1d:5a:9d:9f:39:26:5d:f5:6d:50:07:63:35: e4:1e:c7:c2:34:1f:5b:e7:26:5c:ba:cc:e5:46:d6:34:8d:1f: f6:30:3b:72:2d:7a:ea:07:12:f4:04:ed:c4:47:2d:0d:36:a4: d1:1f:1d:f4:f9:bb:6a:96:1a:7d:e6:97:6d:87:1f:e5:91:23: 8b:9e:5c:85:ea:c7:c3:16:76:44:75:3d:4a:9f:aa:93:d0:ae: cc:bb:4c:0f:3d:57:8a:ca:7c:a8:13:15:76:31:27:63:17:c1: 34:18:13:ad:10:88:24:f1:75:d2:3f:4f:b9:d8:e1:ab:a8:72: 76:99:26:c7:a4:da:f3:4a:df:bf:a6:7c:b1:44:a0:af:0e:79: 7d:bb:52:aa:64:4c:8d:dd:d9:b0:1b:75:02:80:9f:57:09:95: cb:e1:d9:c9:7d:c1:fa:9f:13:71:80:4e:a3:91:3c:10:26:74: fa:60:6c:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjUwNzAxMDAxOTA3WhcNMjUwNzA4MDAxOTA3WjAYMRYwFAYD VQQDEw02ODYzMjk3Yi1iNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dyMs8Nu7akE9QBhfzAPtgdm4a5KqGk0QZbDiRB2k+RTGJY/SaIBlWmtDeWS JzvmcHrwAANJB9xVfcEWgEG8Pp9gP+UGLKilcrTS2ljplRK4gte85a45NssdRQtc B/fEbISL2kq7kEn9cNLHvYjfcFTIDSEcaeVNM7nCuphv4IT+l6v2+EjUqmmgi+wq 1KLaQ9LMV9flRvrIwgGUIul70Df3eHuPLuAo2NKeQjdkBYaIDDk1Rh9fZESADYLj K9mANyHgJwXk2KQVc0M6X5kYJMJG1C/oipD4b9727kGG8kvjkbP2lpu+aqOE/f9M wqYPxEdiUwxO+yVUuiWGM2KRvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIr7iiTf rIXYMvfQeO24YXf1xHLUMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1 LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu4wcWdhwXsYvmfP+ebuUo3jcngvjR4BYObxp9eOaTkzK6GZlxJ/c6 B/zWAP2GBpXD+u1Tk1r58FRzrC2tvVV/wS4DRNUoyk5sn6F0tx1anZ85Jl31bVAH YzXkHsfCNB9b5yZcuszlRtY0jR/2MDtyLXrqBxL0BO3ERy0NNqTRHx30+btqlhp9 5pdthx/lkSOLnlyF6sfDFnZEdT1Kn6qT0K7Mu0wPPVeKynyoExV2MSdjF8E0GBOt EIgk8XXSP0+52OGrqHJ2mSbHpNrzSt+/pnyxRKCvDnl9u1KqZEyN3dmwG3UCgJ9X CZXL4dnJfcH6nxNxgE6jkTwQJnT6YGyS -----END CERTIFICATE-----Generated at Wed Jul 2 16:27:36 2025 by rpki-client